59258 matches found
CVE-2020-37144
CVE-2020-37144 affects Exagate SYSGuard 6001. The root cause is a cross-site request forgery that lets an attacker trick a user into submitting a crafted HTML form to /kulyon.php, resulting in the creation of an unauthorized admin account. Affected product/version explicitly named in multiple sou...
CVE-2020-37144
Exagate SYSGuard 6001 contains a cross-site request forgery vulnerability that allows attackers to create unauthorized admin accounts through a crafted HTML form. Attackers can trick users into submitting a malicious form to /kulyon.php that adds a new user with administrative privileges without...
CVE-2020-37136 ZOC Terminal v7.25.5 - 'Private key file' Denial of Service
ZOC Terminal 7.25.5 contains a denial of service vulnerability in the private key file input field that allows attackers to crash the application. Attackers can overwrite the private key file input with a 2000-byte buffer, causing the application to become unresponsive when attempting to create S...
CVE-2020-37136 ZOC Terminal v7.25.5 - 'Private key file' Denial of Service
ZOC Terminal 7.25.5 contains a denial of service vulnerability in the private key file input field that allows attackers to crash the application. Attackers can overwrite the private key file input with a 2000-byte buffer, causing the application to become unresponsive when attempting to create S...
CVE-2020-37136
ZOC Terminal 7.25.5 contains a denial of service vulnerability in the private key file input field that allows attackers to crash the application. Attackers can overwrite the private key file input with a 2000-byte buffer, causing the application to become unresponsive when attempting to create S...
CVE-2020-37118
P5 FNIP-8x16A FNIP-4xSH 1.0.20 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user interaction. Attackers can craft malicious web pages to add new admin users, change passwords, and modify system configurations by tricking...
CVE-2025-13379
creationtimestamp| type| source ---|---|--- 2026-02-05 14:20:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me4ljljxbs2r...
CVE-2025-65081
creationtimestamp| type| source ---|---|--- 2026-02-05 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-064/...
CVE-2026-25523
creationtimestamp| type| source ---|---|--- 2026-02-05 03:18:38+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3me3gkinuhk2u...
CVE-2026-1642
creationtimestamp| type| source ---|---|--- 2026-02-05 02:48:12+00:00| seen| https://seclists.org/oss-sec/2026/q1/144 2026-02-05 14:55:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3me4nhuumkx2q 2026-02-06 01:50:05+00:00| seen|...
CVE-2026-1251
creationtimestamp| type| source ---|---|--- 2026-02-05 00:42:39+00:00| seen| https://bsky.app/profile/opsmatters.com/post/3me35tkya5s22 2026-02-05 00:42:40+00:00| seen| https://bsky.app/profile/potato.software/post/3me35tlikqn2f 2026-02-05 08:33:28+00:00| seen|...
CVE-2026-25546
creationtimestamp| type| source ---|---|--- 2026-02-05 00:03:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me33oegvsp2h...
CVE-2026-22038
creationtimestamp| type| source ---|---|--- 2026-02-05 00:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me33ivw7jv23...
PT-2026-6597
Name of the Vulnerable Software and Affected Versions Microweber versions prior to 2.0.20 Description A Cross-Site Scripting issue exists in the /admin/category/create API endpoint. An attacker can manipulate the rel id parameter within a crafted URL. By enticing a user with administrative...
PT-2026-6587
Name of the Vulnerable Software and Affected Versions HRSALE version 1.1.8 Description HRSALE version 1.1.8 is susceptible to a cross-site request forgery condition. This allows attackers to add unauthorized administrative users via the employee registration form. An attacker can create a malicio...
EUVD-2025-206825
Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery CSRF vulnerability in the WebAdmin interface through improper handling of the s breadcrumb parameter. The application accepts state-changing requests via the GET method and automatically processes...
PT-2026-6602
Name of the Vulnerable Software and Affected Versions ChestnutCMS versions prior to 1.5.9 Description An issue allows a remote attacker to execute arbitrary code via the template creation function. Recommendations Update to version 1.5.9 or later...
ChestnutCMS 安全漏洞
ChestnutCMS is an enterprise-level content management system developed by Liweiyi, featuring a separation between the front-end and back-end components. Versions of ChestnutCMS prior to v1.5.8 contained security vulnerabilities; these vulnerabilities stemmed from the template creation feature,...